docker-compose.yml
version: '3'
networks:
nginx_bridge:
driver: bridge
services:
nginx:
container_name: nginx
image: nginx:1.19.6
restart: always
ports:
- 80:80
- 443:443
privileged: true
volumes:
- ./conf/proxy.conf:/etc/nginx/proxy.conf
- ./conf/nginx.conf:/etc/nginx/nginx.conf
- ./conf/conf.d/:/etc/nginx/conf.d/
- ./html/:/usr/share/nginx/html/
- ./logs/:/var/log/nginx/
networks:
- nginx_bridge
nginx.conf
#user pengke;
worker_processes 1;
#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
#access_log logs/access.log main;
sendfile on;
#tcp_nopush on;
keepalive_timeout 600;
proxy_connect_timeout 180;
proxy_send_timeout 180;
proxy_read_timeout 180;
client_header_timeout 180;
client_body_timeout 180;
fastcgi_connect_timeout 180;
fastcgi_read_timeout 180;
fastcgi_send_timeout 180;
#keepalive_timeout 0;
# keepalive_timeout 65;
#gzip on;
upstream ebidding {
#此为业务系统部署的地址和端口
server localhost:6850 weight=10;
}
upstream message {
#此为异步通知服务部署的地址和端口
server localhost:6805 weight=10;
server localhost:6805 weight=10;
}
upstream nettyWS {
#此为异步通知服务部署的地址,端口为默认值无需修改
server localhost:10001 weight=10;
server localhost:10001 weight=10;
}
upstream nettyWSOpeninghall {
#此为异步通知服务部署的地址,端口为默认值无需修改
server localhost:10002 weight=10;
server localhost:10002 weight=10;
}
upstream shop {
#此为异步通知服务部署的地址,端口为默认值无需修改
server 172.16.10.72:64000 weight=10;
}
upstream pageoffice {
server localhost:6813 weight=10;
}
upstream pageoffice_test {
server localhost:7813 weight=10;
}
upstream ebidding_test {
#此为业务系统部署的地址和端口
server localhost:7850 weight=10;
server localhost:7850 weight=10;
}
upstream message_test {
#此为异步通知服务部署的地址和端口
server localhost:7805 weight=10;
server localhost:7805 weight=10;
}
upstream nettyWS_test {
#此为异步通知服务部署的地址,端口为默认值无需修改
server localhost:20001 weight=10;
server localhost:20001 weight=10;
}
upstream nettyWSOpeninghall_test {
#此为异步通知服务部署的地址,端口为默认值无需修改
server localhost:20002 weight=10;
server localhost:20002 weight=10;
}
server {
#此为Nginx监听的端口,为用户访问的端口
listen 80;
# ssl on;
server_name localhost;
ssl_session_timeout 5m;
ssl_protocols TLSv1.1 TLSv1.2; #按照这个协议配置
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
#rewrite ^(.*)$ https://$host$1 permanent;
#fastcgi_param HTTPS on;
#fastcgi_param HTTP_SCHEME https;
location / {
if ($request_method = 'OPTIONS') {
add_header 'Access-Control-Allow-Origin' 'localhost';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
add_header 'Access-Control-Max-Age' 1728000;
add_header 'Content-Type' 'text/plain; charset=utf-8';
add_header 'Content-Length' 0;
return 204;
}
if ($request_method = 'POST' ) {
add_header 'Access-Control-Allow-Origin' 'localhost';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range';
}
if ($request_method = 'GET') {
add_header 'Access-Control-Allow-Origin' 'localhost';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range';
}
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_pass http://ebidding;
client_max_body_size 1000m;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_connect_timeout 180;
proxy_send_timeout 180;
proxy_read_timeout 180;
proxy_redirect off;
}
location /pageoffice {
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_pass http://pageoffice;
client_max_body_size 1000m;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_redirect off;
}
location /webdocs {
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_pass http://ebidding;
client_max_body_size 1000m;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_redirect off;
}
location /message/webdocs {
root html;
}
location /message {
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_pass http://message;
client_max_body_size 1000m;
proxy_connect_timeout 3s;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_redirect off;
}
location /message/ws {
proxy_http_version 1.1;
proxy_set_header Connection "upgrade";
proxy_set_header Upgrade $http_upgrade;
proxy_pass http://message;
client_max_body_size 1000m;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_redirect off;
}
location /message/nettyWS {
proxy_http_version 1.1;
proxy_set_header Connection "upgrade";
proxy_set_header Upgrade $http_upgrade;
proxy_pass http://nettyWS;
client_max_body_size 1000m;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_redirect off;
}
location /message/openinghallws {
proxy_http_version 1.1;
proxy_set_header Connection "upgrade";
proxy_set_header Upgrade $http_upgrade;
proxy_pass http://message;
client_max_body_size 1000m;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_redirect off;
}
location /message/nettyOpeninghallWs {
proxy_http_version 1.1;
proxy_set_header Connection "upgrade";
proxy_set_header Upgrade $http_upgrade;
proxy_pass http://nettyWSOpeninghall;
client_max_body_size 1000m;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_redirect off;
}
# error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
# error_page 404 /up.html;
location = /up.html {
root html;
}
}
}